Local Privilege Escalation Vulnerability in Comodo Internet Security Pro

CVE-2024-7250

What is CVE-2024-7250?

The vulnerability within the cmdagent executable of Comodo Internet Security Pro poses a significant risk by allowing local attackers to escalate their privileges and execute arbitrary code with SYSTEM permissions. To exploit this vulnerability, an attacker must first gain the ability to run low-privileged code on the affected system. By creating a symbolic link, they can manipulate the cmdagent process to delete files, which can then be leveraged to escalate privileges and execute further malicious actions. This security flaw highlights the need for users to ensure their systems are updated and to apply best practices for securing local environments.

References